Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/52e2UjxSp7KkoHUFxdNqqQ1dQzLwZKEK2RvnrdKGJDpd/1/BA84972F94DED1627363CADBFA872D5EA75BBC41.mft
File:                     BA84972F94DED1627363CADBFA872D5EA75BBC41.mft (raw, json)
Hash identifier:          JvkoR/Jq9oBeS1glpU4uHwPz/6nDFhCZTTT2jCn0k3s=
Subject key identifier:   2B:49:1D:26:61:FB:1D:F4:3A:70:57:5E:BC:5A:AB:C5:C3:9C:FD:4B
Authority key identifier: BA:84:97:2F:94:DE:D1:62:73:63:CA:DB:FA:87:2D:5E:A7:5B:BC:41
Certificate issuer:       /CN=BA84972F94DED1627363CADBFA872D5EA75BBC41
Certificate serial:       1F23FBD34EBB80261A4317ED7E5C0C0632E491ED
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA84972F94DED1627363CADBFA872D5EA75BBC41.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/52e2UjxSp7KkoHUFxdNqqQ1dQzLwZKEK2RvnrdKGJDpd/1/BA84972F94DED1627363CADBFA872D5EA75BBC41.mft
Manifest number:          0196
Signing time:             Fri 31 Jan 2025 01:00:00 +0000
Manifest this update:     Fri 31 Jan 2025 00:55:00 +0000
Manifest next update:     Sat 01 Feb 2025 03:08:00 +0000
Files and hashes:         1: BA84972F94DED1627363CADBFA872D5EA75BBC41.crl (hash: B0rFyqCbWhrF7EhEcQF8FFzoQG7KyJEU4zJsbyZYPvg=)
                          2: 3230312e3138322e3230382e302f32322d3234203d3e20323637353333.roa (hash: dXPodTBVISS3CP9jKdq+lGDljMm2zMB4f3RvDrx1lmg=)
                          3: 323830343a343265303a3a2f33322d3430203d3e20323637353333.roa (hash: xuPhCLL9hqd9Xb3bC+pLGKaezdnVx6mStRGXgx4JuV4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:23:fb:d3:4e:bb:80:26:1a:43:17:ed:7e:5c:0c:06:32:e4:91:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA84972F94DED1627363CADBFA872D5EA75BBC41
        Validity
            Not Before: Jan 31 00:55:00 2025 GMT
            Not After : Feb  1 03:08:00 2025 GMT
        Subject: CN=2B491D2661FB1DF43A70575EBC5AABC5C39CFD4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:34:0e:db:4e:25:5e:6c:5e:bc:be:f4:52:b6:
                    78:df:9a:13:e1:cb:e2:80:4c:b7:d4:15:6c:dd:19:
                    63:2e:a5:cb:71:10:a8:68:c5:82:81:de:46:3d:e6:
                    40:19:41:31:2f:7d:22:2c:a5:e1:35:6c:5b:19:ad:
                    8b:21:b9:66:71:c8:7e:00:8a:74:be:76:7e:f0:c0:
                    df:6d:15:86:4e:8c:60:ad:83:2a:c9:af:18:23:f2:
                    9c:2d:35:2b:e5:72:64:f3:7c:64:b7:ce:d7:b8:b6:
                    38:b2:e1:1e:bc:02:bf:36:3c:20:8c:d8:28:b1:04:
                    79:c8:08:f1:07:5b:2f:73:9e:34:9a:7c:15:48:e5:
                    23:4e:e3:2f:34:40:27:aa:33:30:5c:3e:96:96:dd:
                    69:92:47:f6:e8:e1:62:58:d1:0d:05:f0:22:6e:87:
                    8f:1e:cd:58:9b:85:65:37:ce:84:bb:94:58:28:fa:
                    45:6f:71:2a:43:46:0d:86:98:c9:df:e9:1b:8c:60:
                    b0:a7:97:28:38:2d:ea:5a:c7:4e:01:7e:ed:d0:c3:
                    9b:0c:6c:bc:03:73:11:19:18:88:c7:33:03:da:29:
                    b4:35:21:53:93:ed:df:ef:30:3c:29:9a:ba:99:34:
                    9e:ee:93:89:ce:1a:48:f2:39:c0:3c:51:62:72:54:
                    83:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:49:1D:26:61:FB:1D:F4:3A:70:57:5E:BC:5A:AB:C5:C3:9C:FD:4B
            X509v3 Authority Key Identifier:
                keyid:BA:84:97:2F:94:DE:D1:62:73:63:CA:DB:FA:87:2D:5E:A7:5B:BC:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/52e2UjxSp7KkoHUFxdNqqQ1dQzLwZKEK2RvnrdKGJDpd/1/BA84972F94DED1627363CADBFA872D5EA75BBC41.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA84972F94DED1627363CADBFA872D5EA75BBC41.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/52e2UjxSp7KkoHUFxdNqqQ1dQzLwZKEK2RvnrdKGJDpd/1/BA84972F94DED1627363CADBFA872D5EA75BBC41.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:8f:b3:f6:16:85:01:e5:f5:81:f3:07:5c:20:63:e5:93:0a:
         ed:b2:bd:41:17:65:72:3b:41:ce:de:5c:11:a9:7f:3a:72:cf:
         db:6a:1e:f7:28:77:38:19:ef:e7:e6:c1:37:83:99:97:cf:ac:
         4e:ca:66:9d:ec:53:0a:64:37:00:86:7e:d6:9d:7a:ea:6a:de:
         cc:1d:4f:7a:a7:ec:09:84:66:1b:e3:d4:c5:f9:85:09:9e:10:
         0a:80:f8:7a:49:e7:f7:27:e7:fc:e4:42:a0:a1:d7:5f:44:18:
         da:7d:1e:c6:9a:2a:61:a3:42:22:54:b0:fb:9d:51:8d:83:45:
         2b:a3:3b:e7:33:ae:6a:af:4b:ed:e1:90:c8:3d:68:ac:67:62:
         6c:b9:9f:7f:65:28:d4:e9:da:33:8c:91:cb:d6:f2:a5:af:76:
         02:52:47:0a:46:65:13:33:1f:23:29:ec:56:18:cd:b1:0e:64:
         68:21:5a:93:a5:61:24:08:98:69:31:76:1b:fd:08:78:28:91:
         cf:ae:8b:3b:76:9a:63:e8:09:f8:a9:25:d4:85:da:18:fe:d6:
         93:00:66:67:23:6f:f9:09:af:0b:f2:0e:d9:4c:aa:31:3c:85:
         8d:b5:b0:a7:47:d2:59:ea:e3:a4:5d:69:97:ad:dc:d2:99:6e:
         cc:f0:5b:c8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUHyP70067gCYaQxftflwMBjLkke0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkE4NDk3MkY5NERFRDE2MjczNjNDQURCRkE4NzJENUVB
NzVCQkM0MTAeFw0yNTAxMzEwMDU1MDBaFw0yNTAyMDEwMzA4MDBaMDMxMTAvBgNV
BAMTKDJCNDkxRDI2NjFGQjFERjQzQTcwNTc1RUJDNUFBQkM1QzM5Q0ZENEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7NA7bTiVebF68vvRStnjfmhPh
y+KATLfUFWzdGWMupctxEKhoxYKB3kY95kAZQTEvfSIspeE1bFsZrYshuWZxyH4A
inS+dn7wwN9tFYZOjGCtgyrJrxgj8pwtNSvlcmTzfGS3zte4tjiy4R68Ar82PCCM
2CixBHnICPEHWy9znjSafBVI5SNO4y80QCeqMzBcPpaW3WmSR/bo4WJY0Q0F8CJu
h48ezVibhWU3zoS7lFgo+kVvcSpDRg2GmMnf6RuMYLCnlyg4Lepax04Bfu3Qw5sM
bLwDcxEZGIjHMwPaKbQ1IVOT7d/vMDwpmrqZNJ7uk4nOGkjyOcA8UWJyVIMlAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUK0kdJmH7HfQ6cFdevFqrxcOc/UswHwYDVR0j
BBgwFoAUuoSXL5Te0WJzY8rb+octXqdbvEEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNTJlMlVqeFNwN0trb0hVRnhkTnFxUTFkUXpMd1pLRUsyUnZucmRLR0pE
cGQvMS9CQTg0OTcyRjk0REVEMTYyNzM2M0NBREJGQTg3MkQ1RUE3NUJCQzQxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JBODQ5NzJGOTRERUQxNjI3
MzYzQ0FEQkZBODcyRDVFQTc1QkJDNDEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NTJlMlVqeFNwN0trb0hVRnhkTnFxUTFkUXpMd1pLRUsyUnZucmRLR0pEcGQvMS9C
QTg0OTcyRjk0REVEMTYyNzM2M0NBREJGQTg3MkQ1RUE3NUJCQzQxLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEANI+z9haFAeX1gfMHXCBj5ZMK7bK9QRdlcjtBzt5cEal/OnLP22oe9yh3OBnv
5+bBN4OZl8+sTspmnexTCmQ3AIZ+1p166mrezB1PeqfsCYRmG+PUxfmFCZ4QCoD4
eknn9yfn/ORCoKHXX0QY2n0expoqYaNCIlSw+51RjYNFK6M75zOuaq9L7eGQyD1o
rGdibLmff2Uo1OnaM4yRy9bypa92AlJHCkZlEzMfIynsVhjNsQ5kaCFak6VhJAiY
aTF2G/0IeCiRz66LO3aaY+gJ+Kkl1IXaGP7WkwBmZyNv+QmvC/IO2UyqMTyFjbWw
p0fSWerjpF1pl63c0pluzPBbyA==
-----END CERTIFICATE-----
Generated at Sat Apr 26 04:38:08 2025 by rpki-client